4 matches found
CVE-2019-16235
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280messagecarbons.vala...
7.5CVSS7.4AI score0.01377EPSS
SaveExploits1References9
DEBIAN-CVE-2019-16235
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280messagecarbons.vala...
7.5CVSS7.1AI score0.01377EPSS
SaveExploits1References1
CVE-2019-16235
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280messagecarbons.vala...
7.5CVSS7.1AI score0.01377EPSS
SaveExploits1References3
CVE-2019-16235
Dino (XMPP client) is affected by CVE-2019-16235, CVE-2019-16236 and CVE-2019-16237. The underlying issues are improper validation in Dino: CVE-2019-16235 for the source of message carbons, CVE-2019-16236 for roster push authorization, and CVE-2019-16237 for MAM message sources. Exploitation coul...
7.5CVSS7.2AI score0.01377EPSS
SaveExploits1References9Affected Software1
20